skills/0xghostcat/claude-ai-cyber-security-skills/program-selection/Snyk

program-selection

Warn

Audited by Snyk on Jul 11, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.85). The required workflow instructs the agent to “Read 10 disclosed reports” and to extract program metadata from HackerOne/Bugcrowd program pages/activity, which are outsider-authored free-text (reports/comments) that would be ingested into the LLM context during runtime analysis.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jul 11, 2026, 10:41 AM

Issues

1